Privacy Policy

Who we are

Oscillation Records Ltd (“we”, “us”), a company registered in England and Wales (company number 15579381), operates this website and is the data controller for the personal data described below. Our registered office address is [registered office address]. For privacy questions or to exercise your rights, contact us at privacy@oscillationrecords.com.

Information we collect

• Account information — when you sign in with Google, we receive your name, email address, and profile image.
• Optional profile details — if you choose to share them, your gender, age, and location (country/city). These are optional and you can skip them.
• Listening & usage analytics — when signed in, we record which content you play and basic engagement (e.g. duration and completion), linked to your account, to understand our audience and improve the catalogue.
• Outbound link clicks — we count clicks on streaming/social links to measure interest. This is recorded anonymously and is not tied to your identity.
• Google Analytics data — with your consent, Google Analytics collects standard usage data (such as page views, approximate location, device/browser, and how you arrived) to measure traffic. See “Cookies” below.
• Newsletter — if you subscribe, your email address.
• Competition entries — if you enter a competition, the details and any files you submit.
• Technical data — standard server logs (such as IP address and browser type) used for security and reliability.

Cookies

We use a strictly necessary cookie to keep you signed in (session authentication). This is required for the site to work and does not need consent.

With your consent, we also set a single first-party analytics cookie (a random anonymous identifier — not your name, email, or precise location). It lets us count plays and page views and understand which releases resonate, including from visitors who aren't signed in. We also use a short-lived session cookie to group your activity into a single visit, and we read campaign tags (utm_source/utm_medium/utm_campaign) from links you arrive through so we can see which promotions work.

With the same consent we also load Google Analytics (Google's gtag.js), a third-party service that sets its own cookies (such as _ga) to measure page views and traffic on our behalf. It is loaded only after you accept; if you reject, it is never loaded and sets no cookies. We never sell your data and we don't use advertising or ad-targeting cookies. Data collected through Google Analytics is processed by Google as described in “Who we share it with” below.

With the same consent we also load Microsoft Clarity, a third-party product-analytics service that helps us understand how visitors use the site (for example, aggregated interaction and page-usage insights). Like Google Analytics it is loaded only after you accept, sets its own cookies, and is processed on our behalf by Microsoft; we never use it for advertising. It is not run in our administrative area.

You choose when you first visit (“Accept” or “Reject non-essential”). If you reject, no analytics cookies are set, Google Analytics is not loaded, and we don't track your activity. You can change your mind any time by clearing this site's cookies in your browser; we'll ask again on your next visit.

How we use your data

• Provide and secure the website and your account.
• Understand our audience and improve our content and releases.
• Send you updates you have opted into (newsletter), which you can leave at any time.
• Run competitions you choose to enter.

Legal bases (UK GDPR / GDPR)

We rely on: consent (optional profile details, the newsletter, and analytics cookies — including Google Analytics); legitimate interests (keeping the site secure and operational); and performance of a contract (operating your account). You can withdraw consent at any time.

Who we share it with

We do not sell your personal data. We share it only with service providers who process it on our behalf, including: Google — for sign-in and, with your consent, Google Analytics (website analytics); Microsoft — for Microsoft Clarity (product analytics), with your consent; Amazon Web Services (media storage); MongoDB Atlas (database); and Vercel (hosting). Some of these providers, including Google and Microsoft, are based in the United States, so your data may be transferred outside the UK/EEA under appropriate safeguards (such as the UK extension to the EU–US Data Privacy Framework or Standard Contractual Clauses).

How long we keep it

We keep account data until you delete your account and newsletter data until you unsubscribe. Analytics data is retained for a limited period appropriate to the purpose — [set your analytics retention period].

Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict, or object to the processing of your data, to data portability, and to withdraw consent. Signed-in users can download or delete their data directly, or contact privacy@oscillationrecords.com. You also have the right to complain to your data protection authority (in the UK, the Information Commissioner’s Office).

Security

Data is transmitted over HTTPS and access to administrative systems is restricted. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

Children

This site is not directed to children, and the optional profile form is limited to ages 18 and over.

Changes

We may update this policy from time to time. We will post the new version here and update the date above.

Contact

Questions? Email privacy@oscillationrecords.com. Postal enquiries can be sent to our registered office, Oscillation Records Ltd, [registered office address].